Bug 1324769 - NGN 4.0: Package "imgbased" is not signed.
Summary: NGN 4.0: Package "imgbased" is not signed.
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: ovirt-node
Classification: oVirt
Component: General
Version: 4.0
Hardware: Unspecified
OS: Unspecified
low
high vote
Target Milestone: ovirt-4.0.0-beta
: ---
Assignee: Fabian Deutsch
QA Contact: cshao
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-04-07 09:04 UTC by cshao
Modified: 2016-05-17 17:02 UTC (History)
8 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-05-17 17:02:38 UTC
oVirt Team: Node
fdeutsch: ovirt-4.0.0?
rule-engine: planning_ack?
fdeutsch: devel_ack+
cshao: testing_ack+

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description cshao 2016-04-07 09:04:28 UTC 
Description of problem:
Package "imgbased" is not signed.

Version-Release number of selected component (if applicable):
ovirt-node-ng-installer-master-20160405.iso
squashfs.20160405
ovirt-node-ng-image-update-placeholder-4.0.0-0.2.alpha1.20160405123556.gitbd184ec.el7.noarch
imgbased-0.5-0.201604040928gitd6a85f8.el7.centos.noarch
ovirt-release-host-node-4.0.0-0.2.alpha1.20160405123556.gitbd184ec.el7.noarch

How reproducible:
100%

Steps to Reproduce:
1. Install ngn 4.0 build.
2. Run command #rpm -qa --qf '%{name}-%{version}-%{release}.%{arch} (%{SIGPGP:pgpsig})\n' | grep -v "Key ID"


Actual results:
# rpm -qa --qf '%{name}-%{version}-%{release}.%{arch} (%{SIGPGP:pgpsig})\n' | grep -v "Key ID"
imgbased-0.5-0.201604040928gitd6a85f8.el7.centos.noarch ((none))


Expected results:
All package are signed.

Additional info:
Comment 1 Fabian Deutsch 2016-04-07 10:34:38 UTC 
It's not critical right now, but in future we want it signed.
Comment 2 Huijuan Zhao 2016-04-21 06:58:00 UTC 
package "ovirt-node-ng-image-update" is also not signed.

Test version:
squashfs.20160415
imgbased-0.6-0.201604150305git1e3b28f.el7.centos.noarch
ovirt-node-ng-image-update-placeholder-007-1.el7.noarch
ovirt-release-host-node-007-1.el7.noarch
ovirt-node-ng-image-update-3.6.5-1.20160420.0.el7.noarch
ovirt-node-ng-image-update-3.6.5-1.20160419.0.el7.noarch

Test steps:
1. Install NGN 4.0(squashfs.20160415)
2. yum update to ovirt-node-ng-image-update-3.6.5-1.20160419.0.el7.noarch
3. yum update to ovirt-node-ng-image-update-3.6.5-1.20160420.0.el7.noarch
4. check packages whether signed:
# rpm -qa --qf '%{name}-%{version}-%{release}.%{arch} (%{SIGPGP:pgpsig})\n' | grep -v "Key ID"

Actual result:
After step4, the output:
ovirt-node-ng-image-update-3.6.5-1.20160420.0.el7.noarch ((none))
imgbased-0.6-0.201604150305git1e3b28f.el7.centos.noarch ((none))
ovirt-node-ng-image-update-3.6.5-1.20160419.0.el7.noarch ((none))

Excepted result:
After step4, there is nothing output.
Comment 3 Sandro Bonazzola 2016-05-02 09:51:46 UTC 
Moving from 4.0 alpha to 4.0 beta since 4.0 alpha has been already released and bug is not ON_QA.
Comment 4 Fabian Deutsch 2016-05-17 17:02:38 UTC 
Please reopen if the the buidl is still unsigned after GA.
Pre-GA it is okay that the build is unsigned
Note You need to log in before you can comment on or make changes to this bug.